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Top Stories 

• An electrical grid failure in downtown Detroit caused a loss of power to government 
buildings, schools, and several other commercial buildings December 2, and prompted the 
rescue of dozens of people from affected structures. - WWJ 62 Detroit (See item 1) 

• Two Lansing, Michigan men pleaded guilty December 1 to selling fake insurance 
certificates to owners of storage tanks at gas stations, making the tanks appear as though 
they were in compliance with the law. - Lansing State Journal (See item 2 ) 

• The National Transportation Safety Board issued a report December 1 that found that a 
series of failures by Boeing, the Federal Aviation Administration, and GS Yuasa 
contributed to battery malfunctions onboard two Boeing 787 Dreamliner aircraft in January 
2013 that led to the fleet of aircraft being grounded. - Wall Street Journal (See item 5 ) 

• Sony Pictures Entertainment issued a statement December 1 confirming that the company 
is continuing to respond to issues created by a cyberattack that occurred during the week of 
November 24. - Associated Press (See item 21 ) 
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Energy Sector 



1. December 2, WWJ 62 Detroit - (Michigan) Detroit goes dark: Massive power outage 
affects courthouse, fire stations, public schools, DIA and more. An electrical grid 
failure in downtown Detroit caused a loss of power to the Frank Murphy Hall of 
Justice, Coleman A. Young Municipal Center, public schools, the Joe Louis Arena, the 
City-County building, and several other commercial buildings December 2. Detroit 
Public Schools dismissed students early while The Detroit Historical Museum and 
Detroit Institute of Arts closed as crews worked to restore power following the rescue 
of dozens of people from affected buildings. 

Source: http://detroit.cbslocal.com/2014/12/02/massive-detroit-power-outage-affects- 
courthouse-wsu-dia-and-more/ 

2. December 2, Lansing State Journal - (Michigan) Two Lansing insurance agents face 
prison for fraud scheme. Two Lansing insurance agents pleaded guilty December 1 to 
creating and selling fraudulent insurance certificates to owners and operators of 
underground storage tanks at gas stations that were inoperable due to age or condition 
from 201 1 to 2013, making the tanks appear as though they were in compliance with 
the law. The scheme placed residents of more than 30 cities at risk of harm after the 
owners and operators purchased the fake certificates instead of replacing the tanks. 
Source: http://www.lansingstateiournal.com/storv/news/local/2014/12/01/underground- 
storage-tanks/19757367/ 

T Return to top i 

Chemical Industry Sector 

3. December 1, South Jersey Times - (New Jersey) DuPont Chambers Works cited for 
health, safety violations by U.S. Department of Labor. The Occupational Safety and 
Health Administration announced December 1 that it cited DuPont Chambers Works 
for 1 1 safety and health violations following an investigation into a May chemical spill 
from a tanker truck at the company’s facility in Deepwater in Pennsville Township. 
Proposed penalties total $120,300. 

Source: 

http://www.ni.com/salem/index.ssf/2014/12/dupont chambers works cited for health 
safety violations by us department of labor.html 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

4. December 2, Wilkes-Barre Citizens ’ Voice - (Pennsylvania) Low-risk cyber security 
issue found at nuclear plant. The operators of the PPL Susquehanna Steam nuclear 
power plant in Salem Township stated that they were in the process of correcting an 
undisclosed cyber security issue at the plant identified by the U.S. Nuclear Regulatory 
Commission (NRC). The issue was described as a low risk issue and interim measures 
were put in place to address the vulnerability following the NRC inspection until the 



- 2 - 



permanent measures are complete. 

Source: http://citizensvoice.com/news/low-risk-cyber-security-issue-found-at-nuclear- 
plant- 1,1796000 



[ Return to top ] 

Critical Manufacturing Sector 

5. December 1, Wall Street Journal - (International) Air-safety board cites failures 
before Dreamliner’s battery fire. The National Transportation Safety Board issued a 
report December 1 that found that a series of failures by Boeing, the Federal Aviation 
Administration, and battery manufacturer GS Yuasa contributed to a battery fire and a 
battery overheating incident onboard two Boeing 787 Dreamliner aircraft in January 
2013 that led to the fleet of aircraft being grounded. 

Source: http://online.wsi.com/articles/faa-boeing-and-gs-vuasa-all-faulted-over- 
dreamliner-battery-fire-ntsb-says- 1417465012 

6. December 1, Detroit News - (National) U.S. probes Graco recall of 6.1 million child 
seats. The National Highway Traffic Safety Administration announced that it is 
opening an investigation into whether Graco Children’s Products Inc., delayed a July 
recall of 6.1 million child car seats due to the seats’ buckles becoming difficult to open. 
Source: http://www.detroitnews.com/storv/business/2014/12/01/us-probes-graco-child- 
seats-recall/19752353/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

7. December 2, Associated Press - (Missouri) Florida men plead guilty in St. Louis to 
fraud scheme. Two Miami, Florida men pleaded guilty December 1 in U.S. District 
Court in St. Louis to stealing personal information from over 400 people in 201 1 and 
2012 and using the information to file fraudulent tax returns seeking more than $2.25 
million in refunds, leading to around $500,000 in losses. 

Source: http://www.kmov.com/news/crime/Florida-men-plead-guilty-in-St-Louis-to- 
fraud-scheme-284459641 .html 

[ Return to top ] 

Transportation Systems Sector 
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8. December 2, WFXT 25 Boston - (Massachusetts) Road reopens after crews work 



overnight to repair gaping sinkhole. Route 140 in Wrentham was reopened 
December 2 after crews worked overnight to clean up damage from a water main break 
that flooded the road when a car reportedly hit a fire hydrant, causing the water main to 
break and a sinkhole to form. 

Source: http://www.mvfoxboston.com/storv/27522913/crews-work-overnight-to-fix- 
wrentham-sinkhole-before-morning-commute 

9. December 1, WITI 6 Milwaukee - (Wisconsin) One dead, one seriously hurt after 
four-vehicle wreck on US 41/45 near Holy Hill Rd. One driver was killed and 
another was injured in a 4-vehicle accident on U.S. Highway 41/45 near Holy Hill 
Road in Washington County, Wisconsin, December 1 that caused about 150 gallons of 
diesel and 50 gallons of motor oil to spill, closing down the highway in both directions. 
Southbound lanes opened to traffic after about 2 hours and northbound lanes were 
expected to reopen approximately 6 hours later. 

Source: http://fox6now.corn/2014/12/01/developing-wreck-impacts-traffic-on- 
highway-4 1 -near-hol y-hill-rd/ 

10. December 1, New York Daily News - (New York) Bomb threat reported aboard 
plane at Kennedy Airport. More than 200 passengers were evacuated off an 
American Airlines flight at John F. Kennedy International Airport November 30 as 
emergency crews responded after receiving reports of a bomb threat. The plane was 
towed to a secure area of the runway and authorities determined the threat was 
unfounded. 

Source: http://www.nvdailynews.com/new-vork/queens/bomb-threat-reported-aboard- 
plane-kennedy-airport-article- 1 .2028 1 86 

1 1 . December 1, WCBS 2 New York City - (New York) Glitch hits monthly LIRR, 
Metro-North MetroCard users, snarls subway access. A glitch in the Metropolitan 
Transportation Authority system affected nearly 10,000 Long Island Rail Road and 
Metro-North Railroad commuters December 1 when riders heading into New York City 
tried to use their MetroCards for traveling on the city’s subways and buses and received 
messages indicating “insufficient fare” due to an issue with some card types. 

Source: http://newvork.cbslocal.com/2014/12/01/ghtch-hits-monthlv-lirr-metro-north- 
metrocard-users-snarling-subway-access/ 
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Food and Agriculture Sector 

12. December 2, U.S. Food and Drug Administration - (Connecticut) Whole Foods 
Market West Hartford, Bishops Corner and Glastonbury recall Tarte Aux 
Pommes due to undeclared almonds. The U.S. Food and Drug Administration 
announced December 2 that Whole Foods Market issued a recall for 10-inch Tarte Aux 
Pomme products produced and sold in 3 Connecticut stores due to undeclared almonds 
caused by mislabeling. 

Source: http ://w w w.fda. gov/S afety/Recalls/ucm425209 .htm 
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13. December 2, Times of Trenton - (New Jersey) Confirmed case of hepatitis A traced 
to employee at Hamilton restaurant. The New Jersey Department of Health warned 
consumers December 1 who ate at or had food catered from Rosa’s Restaurant and 
Catering in Hamilton between November 10 and December 1 that they could be at risk 
for hepatitis A after a food service worker at the restaurant was confirmed to be 
infected with the virus. Consumers who were not previously vaccinated for the virus 
were advised to receive the vaccine as a precaution. 

Source: 

http://www.ni.com/mercer/index.ssf/2014/12/confirmed case of hepatitis a traced to 
employee at hamilton restaurant.html 

14. December 1 , Long Island Newsday - (New York) Ex-manager of Ruth's Chris Steak 
House in Garden City stole more than $230,000 from restaurant, police say. The 

former manager of a Ruth’s Chris Steak House in Garden City was arrested and 
charged December 1 in connection to stealing more than $230,000 from the restaurant 
between 2009 and 2014. The man allegedly underreported sales and other items on 511 
separate occasions and falsified business records to conceal the theft. 

Source: http://www.newsdav.com/long-island/nassau/ex-manager-of-steak-house-stole- 
more-than-230-000-from-restaurant-police-say-l .9669307 
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Water and Wastewater Systems Sector 

Nothing to report 
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Healthcare and Public Health Sector 

15. December 2, Reuters; Chicago Tribune - (National) 50,000 lives saved because of 
fewer hospital errors, officials say. Officials with the Centers for Medicare and 
Medicaid Services reported December 2 that U.S. hospitals committed 17 percent fewer 
medical errors in 2013 than in 2010, saving about 50,000 lives due to improvements in 
hospital quality and safety. 

Source: http://www.chicagotribune.com/news/nationworld/chi-hospitals-make-fewer- 
errors-20141202-story.html 

16. December 1, San Francisco Bay City News - (California) Santa Clara: Suspicious 
odor at Kaiser Hospital shuts down some operations. Authorities are investigating a 
suspicious odor that prompted Kaiser Hospital in Santa Clara to temporarily stop taking 
incoming patients and caused some operations to shut down for 3 hours November 30 
after 2 staff members complained about a strange odor in the emergency department. 
Source: http://www.mercurynews.com/bay-area-news/ci 27043699/santa-clara- 
suspicious-odor-at-kaiser-hospital-shuts 
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17. November 29, Cleveland Plain Dealer - (Ohio) University Hospitals: Employee 
gained unauthorized access to 692 patient files in breach. University Hospitals in 
Ohio notified 692 patients November 28 of a personal and medical information breach 
after a former employee improperly accessed the information, which included Social 
Security numbers and financial account information, from January 2011 to June 2014 
by accessing the hospital system’s electronic medical records. 

Source: 

http://www.cleveland.com/metro/index.ssf/2014/ll/uh employee gained improperly.!! 
tml 
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Government Facilities Sector 

18. December 2, Belleville News-Democrat - (Illinois) Cahokia school bus slides off 
road, five go to hospital. Four students and the bus driver were transported to an area 
hospital with injuries following an accident involving a school bus that slid on an icy 
road and crashed in Cahokia December 1. 

Source: http://www.bnd.com/2014/12/01/3539953 freezing-rain-sleet-making- 
roadways.html 

19. December 2, KSTU 13 Salt Lake City - (Utah) Police: Fremont High student caught 
with gun intended to shoot classmate. Fremont High School in Plain City, Utah, was 
evacuated and classes were dismissed after a student was arrested with a loaded gun 
December 1, after he admitted he intended to shoot another student then open fire on 
the rest of the school. No shots were fired and authorities apprehended the suspect after 
another student reported seeing the teenager with a gun in his waist band. 

Source: http ://fox 1 3no w .com/20 14/1 2/0 1/fremont-high-placed-on-lockdo wn-student- 
detained/ 

20. December 1, Cullman Times - (Alabama) School bus accident in Fairview sends six 
students to CRMC. Six students and 2 others were transported to an area hospital after 
a school bus collided with a vehicle on County Road 1658 in Fairview December 1. 
Source: http://www.cullmantimes.com/school-bus-accident-in-fairview-sends-six- 
students-to-crmc/article 3a4f51f4-79ad-lle4-8bcf-473b37bba3f5.html 



For another story, see item 1 
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Emergency Services Sector 

See item 1 
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Information Technology Sector 



21. December 2, Associated Press - (International) FBI investigating Sony Pictures hack 
possibly linked to leaked footage of ‘Annie,’ Mr. Turner’ movies. Sony Pictures 
Entertainment issued a statement December 1 confirming that the company is 
continuing to respond to issues created by a cyberattack that occurred during the week 
of November 24. The FBI confirmed that the agency is investigating the incident. 
Source: http://www.newsdav.com/entertainment/rnovies/fbi-investigating-sonv- 
pictures-hack-1 .96721 19 

22. December 2, Securityweek - (International) OpenVPN versions released since 2005 
affected by critical flaw. The developers of the open-source virtual private network 
software OpenVPN released a new version of the software to address a critical denial of 
service (DoS) vulnerability which could allow authenticated attackers to cause servers 
to crash. The vulnerability affects all OpenVPN 2.x versions released since 2005 as 
well as OpenVPN Access Server versions prior to version 2.0.1 1. 

Source: http://www.securitvweek.com/openvpn-versions-released-2005-affected- 
critical-flaw 

23. December 2, Securityweek - (International) Mozilla fixes vulnerabilities, disables 
SSL 3.0 in Firefox 34. Mozilla released the latest version of its Firefox browser, 

Firefox 34, closing three critical vulnerabilities and five others, as well as disabling 
Secure Sockets Fayer (SSF) 3.0 support to protect users against POODFE attacks. 
Source: http://www.securitvweek.com/mozilla-fixes-vulnerabilities- 
disables-ssl-30-firefox-34 



For another story, see item 26 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

24. December 2, WCHS 8 Charleston - (Kentucky) Deputies searching for suspects who 
stole cable from cell phone tower. Faw enforcement officials are searching for 
suspects involved in stealing 2 rolls of fiber optic cable from the Appalachian Wireless 
cell tower on U.S. 460 near Paintsville November 25. The stolen rolls weigh between 
300 to 400 pounds and are about 300 feet long. 

Source: http://www.wchstv.com/news/features/eyewitness-news/stories/Deputies- 
Searching-For-Suspects-Who-Stole-Cable-From-Cell-Phone-Tower-60941.shtml 
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25. December 1, Lincoln Journal Star - (Nebraska) Windstream outage affects 250 
Lincoln customers. Approximately 250 Windstream customers in Lincoln remained 
without Internet service when a network device at Windstream’ s office stopped 
working November 28. Service was expected to be restored December 2. 

Source: http://iournalstar.com/news/local/windstream-outage-affects-lincoln- 
customers/article 43f60d00-88al-502f-bf37-80a9b7127b4c.html 

26. December 1, Securityweek - (International) XSS vulnerability in Alcatel-Lucent 
carrier-grade switches. Researchers from Swisscom’s Computer Security Incident 
Response Team (CSIRT) released details of a cross-site scripting (XSS) vulnerability in 
the Alcatel-Lucent 1830 Photonic Service Switch equipment for cable multiple-system 
operator (MSO) networks following the disclosure of the vulnerability June 13. 
Alcatel-Lucent stated that the vulnerability was not considered a high-priority issue. 
Source: http://www.securityweek.com/xss-vulnerabilitv- found-alcatel-lucent-carrier- 
grade-switches 

27. November 30, Orlando Sentinel - (Florida) Alleged cell tower copper bandit 
captured. An alleged copper bandit was identified and detained by Plant City police 
for allegedly stealing copper from cellphone towers of a Polk County company he was 
recently fired from where he knew the combinations to the company’s locks. He is also 
a suspect in similar thefts in Hillsborough County and is charged with grand theft, 
burglary, and possession of burglary tools. 

Source: http://www.orlandosentinel.com/news/breaking-news/os-cell-tower-thief- 
arrested-20141 130-story.html 
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Commercial Facilities Sector 

28. December 2, WXIX 19 Newport - (Ohio) Damage set at $200k in apartment fire that 
displaced 19 children. A 2-alarm fire at the Hawaiian Village Apartments complex in 
Mount Airy, Ohio, December 1 caused about $200,000 in damage and displaced 25 
residents, including 19 children from 4 units. Authorities are investigating the source of 
the fire. 

Source: http ://www .fox 1 9 .com/storv/27 521465/1 9-children-displaced-in-apartment-fire 

29. December 1, Bethesda Magazine - (Maryland) Electrical fire causes $400,000 in 
damage to Bethesda restaurant. The City Lights of China restaurant in Bethesda, 
Maryland, suffered an estimated $400,000 in damage from a November 30 electrical 
fire. The restaurant was closed until further notice and must undergo an inspection by 
health officials before it can reopen. 

Source: http://www.bethesdamagazine.com/Bethesda-Beat/2014/Electrical-Fire- 
Causes-400000-in-Damage-to-Bethesda- Restaurant/ 



30. December 1, Greater New Milford Spectrum - (Connecticut) Bomb threat closed 
Kohl's early on Black Friday. A Kohl’s department store in New Milford was 
evacuated and closed for about 3 hours November 28 while police investigated an 
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emailed bomb threat sent to the business. The store reopened after police searched and 
cleared the scene. 

Source: http://www.newmilfordspectrum.com/news/article/Bomb-threat-closed-Kohl-s- 
early-on-Black-Friday-5927459.php 

For another story, see item 1 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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